James Estrada, the University’s chief information officer, says a computer in the business office was infected by a malicious software program virus.

University spokesman Mark McLaughlin says the virus is believed to have first infected a campus computer back in 1998, and university officials are now determining the scope of the risk.

“That computer had stored on it roughly 18,000 Social Security numbers of current and former CCSU faculty, staff, and student workers,” he told WCBS 880 Connecticut Bureau Chief Fran Schneidau.

McLaughlin says the university is undertaking a massive effort to match names with any Social Security numbers compromised and is offering students and staff identity protection.

The university says no other information, such as names or addresses, was exposed.

(TM and Copyright 2012 CBS Radio Inc. and its relevant subsidiaries. CBS RADIO and EYE Logo TM and Copyright 2012 CBS Broadcasting Inc. Used under license. All Rights Reserved. This material may not be published, broadcast, rewritten, or redistributed. The Associated Press contributed to this report.)